Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/BbHCsSFRL8o3G6fj3n_Ncih3EEg.roa
File: BbHCsSFRL8o3G6fj3n_Ncih3EEg.roa (raw, json)
Hash identifier: k0SwDNsTb/0Ju5wJ84gajmBQbTtjlY0D3sbnqc0xL5E=
Subject key identifier: 05:B1:C2:B1:21:51:2F:CA:37:1B:A7:E3:DE:7F:CD:72:28:77:10:48
Certificate issuer: /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Certificate serial: 0FDB41F6
Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/BbHCsSFRL8o3G6fj3n_Ncih3EEg.roa
Signing time: Sat 01 Jan 2022 06:05:40 +0000
ROA not before: Sat 01 Jan 2022 06:05:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41364
IP address blocks: 185.140.168.0/22 maxlen: 22
194.116.108.0/22 maxlen: 22
194.116.106.0/23 maxlen: 23
194.116.112.0/21 maxlen: 21
194.116.124.0/23 maxlen: 23
194.116.120.0/22 maxlen: 22
194.116.126.0/24 maxlen: 24
194.116.127.0/24 maxlen: 24
194.116.72.0/23 maxlen: 23
194.116.74.0/23 maxlen: 23
194.116.76.0/22 maxlen: 24
194.116.80.0/23 maxlen: 23
194.116.82.0/24 maxlen: 24
194.116.83.0/24 maxlen: 24
194.116.84.0/24 maxlen: 24
194.116.85.0/24 maxlen: 24
194.116.86.0/23 maxlen: 23
194.116.88.0/22 maxlen: 22
194.116.94.0/23 maxlen: 23
194.116.92.0/24 maxlen: 24
194.116.93.0/24 maxlen: 24
194.116.100.0/24 maxlen: 24
194.116.100.0/22 maxlen: 24
194.116.101.0/24 maxlen: 24
194.116.102.0/23 maxlen: 23
194.116.104.0/24 maxlen: 24
194.116.105.0/24 maxlen: 24
193.42.134.0/24 maxlen: 24
2a07:1ec0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 266027510 (0xfdb41f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Validity
Not Before: Jan 1 06:05:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05b1c2b121512fca371ba7e3de7fcd7228771048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:f9:8b:1d:6f:64:a0:ea:5d:c9:90:b8:7a:
f0:e4:f6:07:0b:5b:64:50:a9:07:b5:ed:9a:5e:cd:
0b:02:83:e4:a2:bf:cb:40:9c:bf:ec:21:f4:78:bb:
08:b5:f2:4a:a4:f8:71:b9:0e:4a:b7:b6:5b:35:0f:
25:b2:0a:69:2a:dc:e2:c1:71:85:2c:6d:8a:51:5d:
36:24:04:b1:a3:df:0c:54:9c:aa:48:6f:33:1f:57:
5e:03:01:3d:88:b1:70:ca:6f:83:62:f3:0a:8d:03:
af:b8:72:af:9f:31:fa:31:c1:ac:8b:1c:fc:85:89:
89:49:ba:06:e2:95:f1:6e:f2:ae:f3:ef:3f:77:74:
56:03:a9:ae:f7:80:68:f0:3c:e5:30:e2:44:02:19:
51:37:85:21:61:9b:8c:4e:3d:10:6e:48:92:74:06:
2a:21:3a:c8:69:4b:3c:c0:39:2a:ed:d7:26:d9:f7:
a2:36:d9:df:32:c5:ee:f2:54:1e:91:e0:f5:83:ba:
ff:1e:71:72:23:50:6e:73:00:29:55:62:92:8d:99:
1d:1b:e7:3b:c4:65:c2:c5:19:f2:b9:c2:eb:ca:3b:
cb:11:e6:f8:4c:58:a3:ad:de:4b:0d:48:d8:44:89:
1b:d5:11:d2:a3:13:95:e4:19:55:83:70:2e:db:b4:
ee:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B1:C2:B1:21:51:2F:CA:37:1B:A7:E3:DE:7F:CD:72:28:77:10:48
X509v3 Authority Key Identifier:
keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/BbHCsSFRL8o3G6fj3n_Ncih3EEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.168.0/22
193.42.134.0/24
194.116.72.0-194.116.95.255
194.116.100.0-194.116.127.255
IPv6:
2a07:1ec0::/29
Signature Algorithm: sha256WithRSAEncryption
87:f6:0b:de:63:88:0d:eb:af:89:37:a9:61:12:5a:ec:0d:31:
42:7a:47:fe:2f:69:f8:00:25:5c:ad:97:10:22:6e:79:4a:ae:
e3:79:e3:f6:01:da:e9:39:f0:49:8e:bd:89:60:22:82:73:bf:
4d:f5:be:d2:21:3a:e3:0b:c6:6a:85:4f:63:88:ce:40:9b:41:
42:7a:b4:1b:ee:ae:d1:75:8a:59:fe:91:79:d9:6c:27:81:42:
cb:60:38:6d:e5:87:6a:cc:04:b8:25:26:7c:1d:f7:99:dd:e2:
d0:d0:55:73:a6:78:38:ee:28:22:8c:87:d0:e2:07:2a:71:69:
37:67:17:a6:95:82:dc:b1:f0:1e:53:3a:41:9f:54:ae:20:02:
8b:7f:00:1e:a5:44:e0:e4:21:e8:24:05:26:e3:2d:1a:0f:fc:
1a:52:c8:40:a1:53:dc:8b:88:6d:8b:37:a1:f2:d5:f2:03:f6:
6b:b9:d6:29:79:3f:fe:bc:2b:3b:20:fc:b2:3c:1b:cc:7b:42:
f9:68:01:6d:1c:35:80:da:5e:b4:68:d5:00:39:fe:c1:be:68:
f8:42:d3:cb:b1:6e:0b:9d:29:8b:a9:ac:e2:51:9d:6a:14:77:
0b:c3:c4:35:4d:16:19:4b:da:da:fa:dd:9d:3a:30:b5:fc:23:
fd:c5:ff:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:04 2024 by rpki-client on console-ams.rpki-client.org